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(g) Fault clearance and recovery in an electronic reprographic system. 

(57) A fault clearance and recovery operation in an electronic reprographic system comprises storing in 
memory clearance and recovery instructions for specific system faults, monitoring the system for fault 
occurrence and accessing and displaying the stored instructions upon detection of a fault occurrence. 
Faults having similar recovery features are classified into buckets to facilitate the clearance and 
recovery operations. 
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The present invention relates generally to a system of electronic reprographics and, more particularly, to 
a method and apparatus for clearance and recovery of faults in an electronic reprographic system. 

In light lens printing systems, a lamp or flashing unit flashes light on a document and has an image created 
synchronously on a photoreceptor belt. The photoreceptor belt picks up toner from which a copy is made. 

5 In electronic reprographic printing systems, a document or series of documents comprising at least one 
print job are successively scanned. Upon scanning of the documents, image signals are obtained and elec- 
tronically stored. The signals are then read out successively and transferred to a printer for formation of the 
images on paper. Once a document is scanned, it can be printed any number of times or processed in any 
number of ways (e.g., words deleted or added, image magnified or reduced, etc.). If a plurality of documents 

10 comprise a job which is scanned, the processing or manipulation of the scanned documents can include dele- 
tion of one or more documents, reordering of the documents into a desired order, or addition of a previously 
or subsequently scanned document or documents. The printing or processing can be relatively synchronous 
with scanning, or asynchronous after scanning. If asynchronous, a time interval exists between scanning and 
printing or processing. The system can then accumulate a number of scanned jobs in the system memory for 

15 subsequent processing or printing. The order of the jobs to be printed may be different from the order of jobs 
as scanned depending on the priority of the jobs and the desires of the operator for increasing productivity or 
through-put and decreasing printer or scanner down-time. 

For a variety of reasons, operation in an electronic reprographic system can be interrupted. This can be 
the result of a scanner or printerfault, hardware or software faults, paper misfeed, intentional interruption, mem- 

20 ory loss, etc. Upon such an interruption due to scanner fault, the operator, not knowing precisely what caused 
the fault, must either attempt to locate the origin of the fault or place an order for a service call. Both options 
can be extremely time consuming and can result in an unacceptable degree of down-time. When a fault occurs 
while the system is building a job, not only is down-time a result, but documents present in the paper path can 
be damaged and the integrity of the job cannot be guaranteed. 

25 The related art has disclosed document processing systems which include fault detection and recovery 

capabilities. 

U.S. Patent No. 4,789,985 to Akahoshi et al discloses a document processing apparatus having fault detec- 
tion capabilities. A technique of replacing an existing faulty resource at power up is shown. A self- diagnostic 
test is run every time power-up occurs. The diagnostic test checks which task modes are affected by a faulted 
30 resource so that other task modes can still be completed. 

U.S. Patent No. 4,839,895 to Makita discloses an early failure detection system for multiprocessor systems 
wherein a current status of an apparatus is monitored during idle microprocessor states to detect faults. If a 
failure occurs, that microprocessor is separated from the rest of the system. 

U.S. Patent No. 4,589,090 to Downing et ai discloses a remote processor crash recovery wherein a number 
35 of control boards are used to control a copier's functions. A list of possible faults is checked to monitor current 
system status. A method of recovering from a board crash is shown. In addition, a technique to recover from 
a hardware crash is also shown. A display is used to make a user aware of a fault. 

U.S. Patent No. 4,583,834 to Seko et al discloses a copying apparatus having a computer controller. A 
display at the computer allows an operator to fix a fault as it occurs. 
40 While the related art does include fault detection and recovery capabilities, it does not disclose fault clear- 

ance and recovery operations for an electronic reprographic system which categorize faults according to their 
characteristics and enable independent functions to continue. 

It is an object of the present invention is to provide an electronic reprographic system which displays to 
the operator the clearance and recovery steps needed to be taken upon detection of a fault. 
45 Accordingly, the present invention provides a method for clearance and recovery of faults in an electronic 
reprographic system, including monitoring the system for fault occurrence, characterised by storing in memory 
means clearance and recovery instructions for specific system faults, faults having similar clearance and recov- 
ery instructions being grouped into buckets, upon detection of a fault occurrence, accessing the stored clear- 
ance and recovery instructions; and displaying the appropriate clearance and recovery instructions 
so corresponding to the detected fault, thereby enabling an operator to initiate clearance and recovery from the 
fault 

An aspect of the invention is to provide an apparatus for clearance and recovery of faults in an electronic 
reprographic system, monitoring means for monitoring the system for fault occurrence, characterised by stor- 
age means for storing in memory clearance and recovery instructions for specific system faults, faults having 
55 similar clearance and recovery instructions being grouped into buckets, accessing means for accessing the 
stored clearance and recovery instructions upon detection of a fault occurrence, and display means for dis- 
playing the appropriate clearance and recovery instructions corresponding to the detected fault, thereby enabl- 
ing an operator to initiate clearance and recovery from the fault. 
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Various embodiments of the invention provide an electronic reprographic system which automatically moni- 
tors the fault status of the system; which classifies faults which can be handled using the same instructions 
into buckets to facilitate the recovery operation; which identifies specific areas requiring clearance upon detec- 
tion of a fault; which can fault specific functions without impacting other independent functions; which displays 
instructions for independent system functions in separate display areas enabling the operator to focus only on 
specific areas of the system; and which has the capability to display its inabflity to perform specific operation 
requests. 

The electronic reprographic system is provided which displays clearance and recovery instructions to 
enable the operator to clear and recover from fault conditions encountered during normal system operation. 
Because the system is comprised of a plurality of independent subsystems, instructions can be displayed in 
separate display areas for specific system functions to facilitate identification of system faults. Upon detection 
of a fault, uninvolved independent functions can continue without interruption. Fault prediction can be performed 
by the system. Different faults which require similar recovery operations are classified into buckets to simplify 
the degree of separate instructions to be displayed by the device. 

The invention wfll be described further, by way of example, with reference to the following drawings in which 
like reference numerals refer to like elements and wherein: 

Figure 1 is a view depicting an electronic printing system incorporating the print media identification system 

according to an embodiment of the present invention; 

Figure 2 is a block diagram depicting the major elements of the printing system shown in Figure 1; 
Figure 3 is a plan view illustrating the principal mechanical components of the printing system shown in 
Figure 1; 

Figure 4 is a schematic view showing certain construction details of the document scanner for the printing 
system shown in Figure 1; 

Figures 5A, 5B, and 5C comprise a schematic block diagram showing the major parts of the control section 
for the printing system shown in Figure 1; 

Figure 6 is a block diagram of an Operating System, together with Printed Wiring Boards and shared line 
connections for the printing system shown in Figure 1 ; 

Figure 7 is a view depicting an exemplary job programming ticket and job scorecard displayed on the User 
Interface (Ul) touchscreen of the printing system shown in Figure 1; 

Figure 8 is a flowchart depicting recovery operation of the Figure 1 system according to an embodiment 
of the present invention; 

Figure 9 illustrates a table identifying levels of information required by an operator relative to certain faults; 
Figure 10 illustrates a system fault bucket selection chart; 
Figure 11 illustrates a function fault bucket selection chart; and 
Figures 12A-12D illustrate scanner mode selection charts. 

Referring now to the drawings, and particularly to Figures 1 and 2 thereof, there is shown an exemplary 
laser based printing system 2 for processing print jobs in accordance with an embodiment of the present inven- 
tion. Printing system 2, for purposes of explanation, is divided into a scanner section or image input terminal 
(ITT) 6, controller section 7, and printer section or image output terminal (IOT) 8. While a specific printing system 
is shown and described, the present invention may be used with other types of printing systems such as ink 
jet, ionographic, etc. 

Referring particularly to Figures 2-4, scanner section 6 incorporates a transparent platen 20 on which the 
document 22 to be scanned is located. One or more linear arrays 24 are supported for reciprocating scanning 
movement below platen 20. Lens 26 and mirrors 28, 29, 30 cooperate to focus array 24 on a line-like segment 
of platen 20 and the document being scanned thereon. Array 24 provides image signals or pixels representative 
of the image scanned which, after suitable processing by processor 25, are output to controller section 7. 

Processor 25 converts the analog image signals output by array 24 to digital and processes the image sig- 
nals as required to enable system 2 to store and handle the image data in the form required to carry out the 
job programmed. Processor 25 also provides enhancements and changes to the image signals such as filtering, 
thresholding, screening, cropping, reduction/enlarging, etc. Following any changes and adjustments in the job 
program, the document must be res canned. 

Documents 22 to be scanned may be located on platen 20 for scanning or in the automatic document han- 
dler (ADF) 35 operable in either a Recirculating Document Handling (RDH) mode or a Semi-Automatic Docu- 
ment Handling (SADH) mode. A manual mode including a Book mode and a Computer Forms Feeder (CFF) 
mode are also provided, the latter to accommodate documents in the form of computer fanfold. For RDH mode 
operation, document handler 35 has a document tray 37 in which documents 22 are arranged in stacks or 
batches. The documents 22 in tray 37 are advanced by vacuum feed belt 40, document feed rolls 41 and docu- 
ment feed belt 42 onto platen 20 where the document is scanned by array 24. Following scanning, the document 
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is removed from platen 20 by belt 42 and returned to tray 37 by document feed rolls 44. 

For operation in the SADH mode, a document entry slot 46 provides access to the document feed belt 42 
between tray 37 and platen 20 through which individual documents may be inserted manually for transport to 
platen 20. Feed rolls 49 behind slot 46 form a nip for engaging and feeding the document to feed belt 42 and 
5 onto platen 20. Following scanning, the document is removed from platen 20 and discharged into catch tray 
48. 

For operation in the CFF mode, computer forms material is fed through slot 46 and advanced by feed roils 
49 to document feed belt 42 which in turn advances a page of the farrfold material into position on platen 20. 
Referring to Figures 2 and 3, printer section 8 comprises a laser type printer and, for purposes of expla- 

10 nation, is separated into a Raster Output Scanner (ROS) section 87, Print Module Section 95, Paper Supply 
section 107, and Finisher 120. ROS 87 has a laser 90, the beam of which is split into two imaging beams 94. 
Each beam 94 is modulated in accordance with the content of an image signal input by acousto-optic modulator 
92 to provide dual imaging beams 94. Beams 94 are scanned across a moving photoreceptor 98 of Print Module 
95 by the mirrored facets of a rotating polygon 100 to expose two image lines on photoreceptor 98 with each 

15 scan and create the latent electrostatic images represented by the image signal input to modulator 92. Photo- 
receptor 98 is uniformly charged by corotrons 102 at a charging station preparatory to exposure by imaging 
beams 94. The latent electrostatic images are developed by developer 1 04 and transferred at transfer station 
106 to a print media 108 delivered by Paper Supply section 107. Media 108 as will appear may comprise any 
of a variety of sheet sizes, types, and colors. For transfer, the print media is brought forward in timed registration 

20 with the developed image on photoreceptor 98 from either a main Paper tray 11 0 or from auxiliary Paper trays 
112, or 114. The developed image transferred to the print media 108 is permanently fixed or fused by fuser 
116 and the resulting prints discharged to either output tray 118, or to finisher 120. Finisher 120 includes a 
stitcher 122 for stitching or stapling the prints together to form books and a thermal binder 124 for adhesively 
binding the prints into books. 

25 Referring to Figures 1 , 2 and 5, controller section 7 is, for explanation purposes, divided into an image input 
controller 50, User Interface (Ul) 52, system controller 54, main memory 56, image manipulation section 58, 
and image output controller 60. 

Referring particularly to Figures 5A-5C, control section 7 includes a plurality of Printed Wiring Boards 
(PWB's) 70, PWB's 70 being coupled with one another and with System Memory 61 by a pair of memory buses 

30 72 ,74. Memory controller 76 couples System Memory 61 with buses 72, 74. PWB's 70 include system processor 
PWB 70-1 having plural system processors 78; low speed I/O processor PWB 70-2 having Ul communication 
controller 80 for transmitting data to and from Ul 52; PWB's 70-3, 70-4 and 70-5 having disk drive controller/pro- 
cessors 82 for transmitting data to and from disks 90-1 , 90-2 and 90-3, respectively, of main memory 56 (image 
compressor/processor 51 for compressing the image data is on PWB 70-3); image manipulation PWB 70-6 with 

35 image manipulation processors of image manipulation section 58; image generation processor PWB's 70-7 and 
70-8 with image generation processor 86 for processing the image data for printing by printer section 8; dispatch 
processor PWB 70-9 having dispatch processors 88 and 89 for controlling transmission of data to and from 
printer section 8; and boot control-arbitration-scheduler PWB 70- 10. 

The scanned image data input from processor 25 of scanner section 6 to controller section 7 is compressed 

40 by image compressor/processor 51 of image input controller 50 on PWB 70-3. As the image data passes 
through compressor/processor 51 , it is segmented into slices N scanlines wide, each slice having a slice pointer. 
The compressed image data together with slice printers and any related image descriptors providing image 
specific information (such as height and width of the document in pixels, the compression method used, pointers 
to the compressed image data, and pointers to the image slice pointers) are placed in an image file. The image 

45 files, which represent different print jobs, are temporarily stored in system memory 61 which comprises a Ran- 
dom Access Memory or RAM pending transfer to main memory 56 where the data is held pending use. 

As best seen in Figure 1, Ul 52 includes a combined operator controller/CRT display consisting of an 
interactive touchscreen 62, keyboard 64, and mouse 66. Ul 52 interfaces the operator with printing system 2, 
enabling the operator to program print jobs and other instructions, to obtain system operating information, 

so instructions, programming information, diagnostic information, etc. Items displayed on touchscreen 62 such as 
files and icons are actuated by either touching the displayed item on screen 62 with a finger or by using mouse 
66 to point a cursor to the item selected and keying the mouse. 

Main memory 56 has plural hard disks 90-1, 90-2, 90-3 for storing machine Operating System software, 
machine operating data, and the scanned image data currently being processed. ; 

55 When the compressed image data in main memory 56 requires further processing, or is required for display 
on touchscreen 62 of Ul 52, or is required by printer section 8, the data is accessed in main memory 56. Where 
further processing other than that provided by processor 25 is required, the data is transferred to image mani- 
pulation section 58 on PWB 70-6 where the additional processing steps such as collation, make ready, decom- 
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position, etc., are carried out Following processing, the data may be returned to main memory 56, sent to Ul 
52 for display on touchscreen 62, or sent to image output controller 60. 

Image data output to image output controller 60 is decompressed and readied for printing by image generat- 
ing processors 86 of PWB's 70-7, 70-8 (seen in Figure 5A). Following this, the data is output by dispatch pro- 

5 cessors 88, 89 on PWB 70-9 to printer section 8. Image data sent to printer section 8 for printing is normally 
purged from memory 56 to make room for new image data. 

Referring particularly to Figure 6, system control signals are distributed via a plurality of printed wiring 
boards (PWB's). These include EDN core PWB 1 30, Marking Imaging core PW8 1 32, Paper Handling core PWB 
134. and Finisher Binder core PW8136 together with various Input/Output (I/O) PWB's 1 38. A system bus 140 

10 couples the core PWB's 130, 132, 134 and 136 with each other and with controller section 7 while local buses 
142 serve to couple the I/O PWB's 138 with each other and wfth their associated core PWB. 

On machine power up, the Operating System software is loaded from memory 56 to EDN core PWB 130 
and from there to the remaining core PWB's 132, 134 and 136 via bus 140, each core PWB 130, 132, 134, 136 
having a boot ROM (not shown) for controlling downloading of Operating System software to the PWB, fault 

15 detection, etc. Boot ROMs also enable transmission of Operating System software and control data to and from 
PWB's 130, 132, 134 and 136 via bus 140 and control data to and from I/O PWB's 138 via local buses 142. 
Additional ROM, RAM, and NVM memory types are resident at various locations within system 2. 

Refening to Figure 7, jobs are programmed in a Job Program mode in which there is displayed on touchsc- 
reen 62 a Job Ticket 1 50 and a Job Scorecard 1 52 for the job being programmed. Job Ticket 1 50 displays vari- 

20 ous job selections programmed while Job Scorecard 152 displays the basic instructions to the system for 
printing the job. 

CRASH RECOVERY 

25 A fault or crash is an unpredictable condition in any part of the system 2 which causes a subset of the system 
elements to become unavailable to the operator. Some examples are: 

- At the system level: Where a reboot (restart of the system after a crash which could be initiated by the 
system or through an operator intervention at Ul 52) or a repowering (initiated by an operator only, but could 
include a loss of power) occurs. 

30 - At the system element level: Where the system attempts to recover automatically by reinitializing or 
resoftioading the system element Additionally, during certain fault recovery procedures, the operator may 
cause the system to reinitialize or resoftload the system elements to achieve recovery. 

- At the hardware level: When the system hardware becomes inoperative. 

A crash recovery operation will return the system elements to a functional state after a crash has occurred. 

35 During recovery, the initial cause of the crash (i.e., the fault) must be cleared, Whenever possible, the first 
attempt at recovery will be automatic, with no operator intervention, and without impact to the other system ele- 
ments. If assistance is required, it wfll be at the operator level. If a hardware failure is detected during the system 
self-test, a fault code will be displayed at Ul 52 to alert the operator that a service call is in order (if this fault 
cannot otherwise be cleared by the operator). 

40 Categories of crashes which occur in system 2 include: 

1) those that the operator can perceive, but are automatically recoverable; 

2) those which cause the system to automatically recover to a certain level, but which also require the 
operator to assist in order to finish recovery; and 

3) those in which the system cannot automatically recover, and which require the operator to initiate the 
45 process of recovery (e.g., booting, cycling power). 

Scanner crash recovery is primarily controlled by the system control 54. The system control 54 stores scan- 
ner state information and scanned image information on a disk 90 in memory 56 as it is received. Upon reboot 
from a crash, this information can be read from the disk 90 and the state of the scanner system 6 reconstructed. 
In system 2, the scanner 6 is a separate sub-system, thus it is possible for the system control 54 to crash and 

so the scanner 6 to remain in a running state. To handle these types of crashes, the scanner 6 periodically checks 
the communications between itself and the system control 54. if the scanner 6 determines that the system con- 
trol 54 is not responding, it wBI shut down and wait for instructions from the system control 54. When the system 
control 54 performs its crash recovery, it indicates to the scanner 6 that a crash has occurred and loads the 
job state information into the scanner 6. This also causes the scanner 6 to issue faults that are used to clear 

55 the paper path. 

In order to get the Ul 52 back into a valid state after a crash, a special recovery method is implemented. 
Every time the system control 54 is booted, the Ul 52 asks the system control 54 for the current scan job in 
progress and its state (current document feed mode). If there is a job in progress, the Ul 52 loads the job and 



5 




EP 0 478 343 A2 

proceeds with its programming. 

Each scanner input mode has its own unique recovery procedures. The recovery for each scan mode pro- 
ceeds as follows: 

Platen - Display the last image captured to the operator so that the next document required for scanning 
5 can be captured. The operator has the capability to clear the fault via a button on Ul 52 in the fault frame, if all 
the documents required have been captured. 

SADH and CFF - Display the last image captured to the operator so that the next document required for 
scanning can be captured via the required source. The operator has the capability to clear the fault via a button 
on Ul 52 in the fault frame, if all the documents required have been captured. The normal misfeed instructions 
10 are presented to the operator by Ul 52 to enable paper path clearance. 

RDH - The operator is given the norma! "reorder recovery" (clear all areas) instructions displayed at Ul 
52 and is instructed to reorder the originals and place them back into the handler. When scanning of the stack 
is resumed by the operator, the system will automatically slew feed the documents to the image required in the 
stack and continue scanning from that point. The system determines what the next document to capture is by 
15 searching the stack contents that were saved on the disk 90. This same stack content information is down-loa- 
ded to the scanner 6 so that its document stack knowledge is the same as the system control 54, this information 
being used by the scanner 6 to detect document miscounts and so that the documents can be inverted correctly 
when required. 

Referring now to Figure 8, an embodiment of the present invention includes an operation setting forth speci- 
20 tic instructions to an operator for effecting the required operator intervention necessary to perform fault clear- 
ance and recovery. Clearance and recovery instructions for specific faults are stored (Step 200) in system 
memory 61. While system 2 is operating, the system is monitored for the occurrence of any of a plurality of 
faults (Step 202). If no fault occurrence is detected, the normal operation of system 2 continues (Step 204). 
However, if a fault occurrence is detected which has corresponding clearance and recovery instructions stored 
25 in memory, these stored instructions are accessed (Step 206). The system functions which are unaffected by 
the specific fault detected continue without interruption. The appropriate clearance and recovery instructions 
which are accessed are then displayed at user interface 52 (Step 208). The operator follows the displayed 
instructions to perform the required operator intervention necessary to recover from the specific fault occurr- 
ence. Once fault recovery is achieved (Step 212), the normal operation of system 2 is continued (Step 204). If 
30 recovery cannot, however, be effected, a service call may be required. 

The specific display and fault handling features in accordance with an embodiment of the present invention 
are set forth below. These features reference several terms which will now be defined. 

A bucket is a collection of several events which trigger the same system level response and require the 
same operator response and message displays at user interface 52. A bucket is made up of several senses 
35 and allows simiiarfaults to be handled with the same fault handling instructions. A sense state mechanism uses 
sense values to smoothly step an operator through clearance and recovery of scanner faults using a continuous 
series of instructions. Certain scanner faults, such as RDH misfeeds, require a specific clearance order and 
therefore have specific sense values. 

Zone values are also provided with RDH misfeeds to report specific scanner areas which require clearance. 
40 A zone value provides a high level message describing the scanner areas requiring clearance. While a bucket 
specifies only one area for clearance at a time, a zone value specifies a plurality of areas for clearance. 

A function defines system hardware and/or software modules which are used by system 2 to execute speci- 
fic operation requests. Examples of these are image conversion, mark, post parse, scan and signatures. 
A function feature is a portion of a function which can be optionally selected for use by an operator through 
45 user interface 52. The function is still usable to process a subset of its available operations when a feature is 
not available. 

An object is an operator selectable item which exists within the system. Objects can be operated on 
synchronously through direct operator invocations at the user interface 52. They can also be operated on 
asynchronously through system invocation (by being submitted to a function as part of a queued sequence of 
so operations). 

An operation is a request for system action which is perceivable by the operator. An operation can be 
synchronous or asynchronous. A synchronous operation is a request for action invoked directly by the operator 
through the user interface 52. The operator expects feedback concerning the result of this action request before 
continuing on to make new action requests. An asynchronous operation is a request for action invoked directly 
55 by the operator or indirectly by the system 2. The operator does not expect immediate feedback concerning 
the result of the action request. The operator expects to be able to begin (or continue) making new action 
requests. Operator selection is an invocation made by the operator to set up a future operation request. No 
immediate system action is expected by the operator as a result of the selection. • 
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Risk dasslfies a clearance and/or recovery action according to its effect on the system and/or operator by 
taking a given course of action. Clearance and/or recovery action will be considered risky if: (1 ) the action could 
result in a hardware component being damaged or destroyed; (2) the action could result in damage or destruc- 
tion of system software which cannot be readily recreated without service intervention; (3) the action could pose 
s a physical safety hazard to the operator; and/or (4) the action could result in the loss of an operator data base 
which cannot be readily recreated. 

A service fault code is a reference code assigned to all displayable failure events and to operator exception 
messages (i.e., not logged fault events). 

A task is a group of operation requests organized by the system in such a way as to produce a higher level 
10 output for the operator (i.e., scan a job, print a job, etc.). 

Display can be provided according to event types. A function fault event type is one which causes a specific 
system hardware or software module to become unavailable or degraded. A function fault, from the operator's 
perspective, prevents specific operation requests from being attempted or causes specific operations being 
executed to abort, suspend or fail. Operation requests which do not require the use of the faulted hardware or 
15 software module (or the specific faulted feature within the module) will continue to execute normally. If a fu notion 
fault is such that only certain features of that hardware or software module are faulted, the function will be avail- 
able in a degraded state. The function, in this case, will still be available to execute operations which do not 
require the faulted features. 

The informational display event is one which causes an informational message to be displayed to the 
20 operator at user interface 52. Informational events have no immediate impact to ongoing system operations 
and do not require any mandatory operator action. Informational events can queue the operator to take an 
optional action which might prevent a future system, function or object fault. Some early warnings of pending 
function or object problems include (1 ) an object waiting to enter a function cannot be processed by the function 
because an operator supplied consumable required by the function is not available (e.g. first job in the print 
25 queue requires a paper stock that is not currently loaded and a tray is available which is not being used for the 
currently printing job); and (2) a source for an operator supplied consumable is exhausted while a function is 
executing an operation and the function has switched to an alternate supply (e.g. auto tray switching has been 
invoked). The pending object or function fault can be avoided if the operator executes the desired action in a 
timely fashion in response to a warning at user interface 52. 
30 An object fault is an event which prevents operation requests from being attempted on a particular object 

or an event which causes operations currently being executed on a particular object to abort, suspend or fail. 
Operations which are not related to the faulted object are allowed to continue to execute normally without clear- 
ing the fault Object faults occur for the following reasons: (1) an object in the print queue is prevented from 
entering a function required for print because a feature of the function required by the object is not currently 
35 available; (2) something about the object itself prevents a function from continuing an operation already in pro- 
gress; (3) a function operating on an object faults with the object in a partially processed state and the function 
is one that handles its faults by removing the object from the function; (4) object faults because of invalid pro- 
gramming parameters which are not detected until after the object entered the system; (5) an object located 
external to the base system (Le., from a net source) is required to continue processing an object currently resi- 
40 dent in the system and the external object either cannot be found or is faulted; and (6) the system does not 
have enough resources to process the object as requested. The invalid parameters prevent the object from 
being processed by a function it is attempting to enter. 

An operation delay is an event which occurs when (1) a synchronous operation takes longer than 2-4 sec- 
onds to execute; and (2) an asynchronous operation which the operator can perceive is interrupted for longer 
45 than 8-10 seconds. 

An operation failure is an event which causes a system action request to stop executing. Operation failures 
wfll cause the affected operation to suspend or abort. The operator will only be aware of an operation failure 
when a synchronous operation has faBed. 

A selection conflict is an event which occurs when the operator selects a combination of features which 
so are in conflict with each other. 

A system fault is an event which causes the entire system to become unavailable. System faults cause all 
current system operations to suspend or abort The system is not available to perform any operations until the 
fault is cleared. If the fault cannot be cleared, further system operation is prevented and a service call is required. 

The display features at user interface 52 according to an embodiment of the present invention are set forth 
55 as follows: 
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I. Functions Of Display at Ul 52 

A. Fault Code Display 

5 A fault code indicates the root cause of the problem, and is used during failure isolation. 

In many cases, two or more failure conditions may result in the same operator fault message and clearance 

procedure but will have different fault codes assigned. 

Should two or more failure conditions occur in conjunction that generate the same operator fault message, 

the controller 7 is capable of queuing the fault codes and displaying the code for the primary failure. The con- 
w broiler 7 displays the fault code for the root cause or primary failure that generated the operator fault message. 

If the primary failure is uncertain, the code for the failure detected first shall be displayed. The controller 7 shall 

also update the fault code displayed in a fault clearance frame in cases where the fault status changes (i.e. 

one of the failures is cleared) but all the conditions necessary to clear the operator fault message have not been 

met. 

15 The operator is also able to display a queue of several active failure codes. The queued faults include all 
active failures including masked or degraded mode failures that are not currently displayed due to the related 
feature not being currently selected or due to the feature/function being deconfigured from the system by the 
user. The queued fault displayer is dynamically updated when a failure is cleared. The priority of the queued 
faults is all controller 7 failures first, followed by all printer 8 failures and then all scanner 6 failures. The failures 

20 within each module (controller 7, printer 1 , and scanner 6) are displayed in the priority presented to the operator. 
The assignment of fault codes adheres to the Multinational Standard for Diagnostic Program Numbers and 
Status Codes (700P02860). The format of the code will be a three digit alphanumeric prefix, a dash, and a 3 
digit suffix (AXX-YYY). The code assignment is made with the prefix representing the section of the service 
documentation/dialog that contains the faulted function. The assignment of specific suffix numbers is based 

25 on the sequence of operation within the function or other factors that systematize the process. 

When normal Ul 52 display capability does not exist, a four digit code is displayed at a Maintenance panel. 

B. Function Fault Display 

30 Three separate display areas of Ul 52 for handling Function faults are provided as follows: 

- Function Faults which impact the ability to scan jobs into the system; 

- Function Faults which impact the ability to print jobs into the system; 

- Function Faults which impact the ability to do operations other than Scan or Print (i.e. Image Display oper- 
ations, External Data interface communications, etc.) 

35 The display provides the following to the operator relative to function faults: 

- A mechanism to allow the operator to display the detailed fault clearance and recovery procedures; 

- For cases where an automatic fault clearance and/or recovery attempt fails, a mechanism which allows 
the operator to retry the required recovery procedures (i.e. a fault reset mechanism); 

- For cases where the operator is the decision maker on when clearance and recovery should be 
40 attempted, a mechanism which allows the operator to retry or initiate the required recovery procedures (i.e. 

a fault reset mechanism); 

- Function fault occurrences do not spontaneously cause the current Ul 52 work space area to be covered 
with fault clearance information. The top level Function fault display should be confined to a particular dis- 
play area; and 

45 - If the fault cannot be cleared, a means is provided to inform the operator of what things cannot be done 
by the system as a result of the fault. 

C. Information Message Display 

so The operator view of informational messages related to asynchronous operations will always be through 
the appropriate area of status handler of Ul 52. Early warnings of pending Function or Object faults will always 
be related to asynchronous operations. The operator view of informational messages related to synchronous 
operations will always be through a current dialog message display area of Ul 52. 

55 D. Object Fault Display 

From the Operator's perspective, objects will only exist in the following locations: ; 

- In the scanner 6; 
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- In the Print Queue; 

- In the Printer 8; 

- In the System File; and 

- In a directory. 

The top level operator view of faulted objects is as follows: If the object has faulted while it is in the Scanner 
6 or Printer 8, the operator is made aware of the faulted object via a function fault displayed in the status handler 
area of Ul 52. If the object faults while it is in the print queue, the operator is made aware of the faulted object 
via a "Faulted job in the print queue" message displayed in the printer display area of the status handler Ul 52. 
If the object faults while It is in the System File, the operator will be made aware of the faulted object via a "Faul- 
ted job in the System Re" message displayed in the "System Status" display area of the status handler of Ul 
52. If the Object faults during a Synchronous Operation attempt (e.g. an Image Display operation or a Directory 
manipulation), the operator is made aware of the faulted object via an operator failure message in the current 
dialog message display area of Ul 52. 

In all cases, specific information on how to correct the faulted object will be available with the object at the 
point in the dialog area of Ul 52 where the object can be viewed. The level of information available is specific 
enough to handle the cases identified in Figure 9. Faulted objects should always be distinguishable from unfaul- 
ted objects in the dialog area of Ul 52 at the point where they can be viewed by the operator. 

E. Operation Delay Display 

Synchronous operation delay messages are displayed via a message in the current dialog message display 
area of Ul 52. Asynchronous Operation delay messages are displayed in appropriate status handler display 
area of Ul 52. 

Feedback is provided to the operator when any of the following Operation Delays occur 

1. Document Handling/Scanning Function Delays which require feedback: 

- Scanner is warming up. 

- Documents are being reordered. 

- Automatic Document Handler/Scanner Fault Recovery attempt is in process which will take longer 
than 2-4 seconds. 

- Document handler is searching for the next separator in a stack. 

- Document Handler/Scanner function is cycling down in response to an Interrupt invocation. 

- An on line scan function diagnostic is in process which will take longer than 2-4 seconds. 

2. Printer Function Delays which require feedback: 

- Printer is wanning up. 

- Printing process is interrupted to do an Image Quality Adjustment 

- Automatic Printer Fault Recovery attempt is in process which will take longer than 2-4 seconds. 

- Printer is Cycling down from a Stop Print invocation. 

- Bind job is submitted to Print Queue, Print Queue is empty, and the Binder is not warmed up. 

- An on line print function diagnostic is in process which wfll take longer than 8-10 seconds. 
40 - Fuser goes under temperature during print 

- Printing Process is interrupted to do an Unload Stacker operation. 

- Printing operation is interrupted between queued jobs (<8-10 seconds between jobs required). 

- Printing process is delayed to deliver purged sheets to the top tray. 

3. External Data Interface Operation Delays which require feedback : 

45 _ Requirements are to be determined depending on whether these operations are implemented as 

synchronous or asynchronous operations. 

4. Print queue Delays which require feedback : 

- Job has been submitted to Print Queue, but the printer must remain in a standby ready state (i.e., 
printer startup must be delayed) because the only available job(s) in the print queue must be operated 

50 on before being submitted to print (e.g. batch rotated, signaturized, formatted, etc.). 

5. Ul 52 Delays which require feedback: 

- While touch function is unavailable because it is being reset 

- When mode switching is delayed. 

- Edit Mode delays which will take longer than 2-4 seconds. 

55 - An on line image display diagnostic is in process which will take longer than 2-4 seconds. 



«' 



EP 0 478 343 A2 

F. Operation Failure Display 

The operator is informed of Synchronous operation failure via a message displayed in the current dialog 
message area of U1 52. The failure message generally informs the operator of the reason for the operation fail- 
5 ure. 

- If the operation failure has been caused by a function fault, the message indicates what particular func- 
tion/function feature is not currently available. 

- If the operation failure is the result of an object fault, the message indicates where the faulted object can 
be found. 

10 The operator view of Asynchronous operation failures will always be through Function faults or Object faults 
displayed in the status handler message area. 

G. Selection Conflict Display 

15 If the conflict is detected at the time of programming, the operator view of selection conflicts is through a 
message displayed in the current dialog message area of Ul 52. If the conflict is detected after an object has 
been created and entered the system, the conflict is displayed through the normal Object fault display mechan- 
isms. 

20 H. System Fault Display 

System faults are the highest priority events from a display perspective. When this type of fault occurs, the 
dialog area of Ul 52 provides the operator with a very obvious indication that the system is "broken-. There are 
no requirements to display other types of events to the operator while a system fault exists. System faults can 
25 also cause secondary Function and/or Objectfaults to occur. However, display of these events is of a secondary 
importance until after the system fault is cleared. The only requirement is that these secondary events be dis- 
played to the operator through their normal display mechanisms after the system fault has been successfully 
cleared. 

If a full Ul 52 display capability exists after a system fault has been declared, the status handler provide 
30 access to the following: 

- A display of the detailed fault clearance and recovery procedures; 

- For cases where an automatic fault clearance and/or recovery attempt fails, a mechanism which allows 
the operator to retry the required procedures (i.e. provide a fault reset mechanism); and 

- For cases where the operator is the decision maker on when clearance and recovery should be 
35 attempted, a mechanism which allows the operator to initiate the required procedures (i.e. provide a fault 

reset mechanism). 

If a full display capability does not exist, the display is as follows: 

- If Reduced Display Mode (RDM) capability exists, a fault indication should be displayed at the Ul 52 and 
the appropriate service code should be displayed at the maintenance panel; 

40 - If RDM capability does not exist, only the service code will be displayed at the maintenance panel. 

II. System Event Handling 

The unique System level requirements for handling events are largely dictated by the event type, the 
45 uniqueness of the required system response to the event, and the uniqueness of the operator displays required 
to deal with the event From the operator's perspective, all events which have common attributes in these areas 
are grouped into the same event bucket even though they may have widely diverse causes. 

A. General Handling of System Faults 

50 

The general requirements for handling System Faults are dependent on the following: 

- Whether or not continued operation in the current state would pose a risk to the operator or system; 

- The state of the system after the fault is declared (in the middle of booting or during normal operation); 

- The display capability that exists after the fault is declared (Full Display, Reduced Display Mode, or Main- 
55 tenance Panel Only);— 

- Whether or not attempting fault clearance and/or recovery would pose a risk to the operator or system; 

and 

- Whether or not Operator assistance is required to attempt the clearance or recovery procedure. 
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Figure 10 provides a guideline for selecting the appropriate System Fault bucket based on the above fac- 
tors. 

1. Other Miscellaneous System Fault Handling Features 

5 

In cases where the controller 7 determines that an automatic reboot of the system is necessary while the 
IIT and/or IOT are in a cycled up state, the ESS (if possible) should attempt to command the IIT and the IOT 
to complete a soft cycle down process (and wait for it to occur) before initiating the reboot process. 

B. General Handling of Function Faults 
10 The general handling of Function Faults is dependent on the following: 

- Whether or not the function is totally unavailable after the fault is declared or whether only certain features 
of the function are not available; 

- Whether or not attempting fault clearance and/or recovery would pose a risk to the operator or system; 

- Whether or not attempting fault clearance and/or recovery would cause other functions to suspend oper- 
15 ation for more than an 8-10 second time period; and 

- Whether or not Operator assistance is required to attempt the clearance or recovery procedure. 
Figure 1 1 provides a guideline for selecting the appropriate Function fault bucket based on the above fac- 
tors. 

The amount of Operator interaction required for the Scan and Print Functions is much greater than for the 
20 other functions of the system because of their physical nature. Most of the events require unique interactions. 
As such, there is a multitude of events related to each function which require unique event buckets. 

1. Other Miscellaneous Function Fault Handling Features 

25 If communications between controller 7 and a peripheral (scanner 6 or printer 8) are lost at any time, the 

peripheral which cannot communicate with the controller 7 is responsible for initiating its own soft cycle down 
process. If an object is automatically removed from a function as a result a function fault while it is in a partially 
processed state, the object is faulted before it is moved. If the operator attempts to save a partially processed 
object while it is in the Scan function, the object is faulted before it is moved to the system ffle. Anytime a 
30 hardware function halts operation with an object still in it, the operator should have access to "Save Object" 
and " Delete Object" mechanisms. 

If multiple faults occur simultaneously within a given hardware module (e.g. Print or Scan), the function 
recovery instructions are not displayed until all faults which make the module Not Ready have been cleared. 
When all faults have been cleared, only one set of function recovery instructions are provided to the operator 
35 representing the composite recovery required, rf a peripheral is stopped by the controller 7 to attempt a reboot, 
the peripheral recovers per the Crash Recovery strategy. That is: 

_ If the operator is not required to open any covers or doors of the peripheral to clear secondary faults which 
have occurred as a result of the reboot attempt, operation of the peripheral is resumed automatically. 

- If the operator is required to open any covers or doors, operation of the peripheral in question is resumed 
40 only as a result of a direct operator invocation through Ul 52. 

C. General Handling of Object Faults 

If the Object is in either the Scan or Print function at the time of the fault, the Function suspends Operation 
45 and the Object remains in the Function. 

- The operator always has the option to remove the object from these functions (Delete or Save) once the 
fault is declared. 

- If the operator removes a faulted object from either of these functions and the function was faulted solely 
because the object was faulted, the act of removi ng the faulted object from the function causes the function 

so fault to clear and the function to return to a ready state. 

If the Object is in any other function (other than scan or print) at the time of the fault, the system automatically 
removes the Object from the function when the fault occurs. In this case, the function is not faulted and the 
object is accessible in the Ul 52 at the last location it was in prior to entering the function. 

55 2. Handling object faults which occur while the object is in more than one function 

tf an object fault occurs while it is being operated on by more than one function, the following general rules 
apply. 
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- The Object is faulted. 

- All functions upstream (i.e. if the Object is in Scan, Post Parse and Print, Scan is upstream of Post Parse 
and print is downstream of Post Parse) of where the fault occurs continue operating on the object until an 
operator action is taken that prevents continuing. 

5 - All functions downstream of where the fault occurs suspend or abort operation. 

- If the object is in the print function (i.e. prints already being made) when the fault occurs and it did not 
fault in the Scan function, the Print function faults and the Delete or Save Options are made available in a 
Printer Status Handler Display area of Ul 52. 

- If the Object faulted in the Scan function, the Scan function faults and the options to delete or save the 
10 object are available through a Scanner Status Handler display area of Ul 52. 

- In ail other cases, the object is available for selection somewhere within the Ul 52 and the operator options 
reside with the object. 

3. Clearing faulted objects 

15 

All object faults can be cleared by the operator indicating via an interface invocation that the problem has 
been corrected. In addition, objects in the Print Queue which become faulted while attempting to enter a Print 
function (e.g. Format, Mark, Auto Signatures) because a function feature required to process the object is not 
currently available become unfaulted if the operator moves the object to the system file. 

20 

4. Options for dealing with Faulted Objects 

The operator minimally has the following options available for dealing with faulted objects: 

25 

Available Faulted Object 

Faulted Object Type Operations 

Saved Program Delete Program . 

30 

Review Job 
Reprogram Job 
Edit Job 

- Delete Pages 
Reprogram Pages 



Job 



35 



Edit page level 
content 
Delete Job 



Delete Item 
Edit Item 

so III. General Status Handeler Display 

The status handler display provides three unique message display areas for communicating system events 
to the operator. The display of the various events is partitioned as follows: 
A. Scanner Display C s 
55 1) Scanner State Information (Ready, Not Ready, Scanning Job XX) 

2) Function Faults which stop the scanner and/or make the Scanner Not Available to Scan any Job. 

3) Scanner Status and Warning Messages. 

4) Function Faults which make the Scanner Not Available to accept some Scan jobs or make the Scan- 



45 

Library Item 
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ner function Degraded (Degraded Scanner Capability). 
Examples: 

. image Quality is Degraded. 

. Document Handler is not Available (Only Platen mode available). 

. RDH and SADH not available (Only Platen and CFF mode available). 

. RDH not available. 

. Slot not available (no SADH or CFF). 

. Separator function and Platen mode not available. 

. CFF not avaOable. 

. SALDH mode (large documents) not available. 
. Auto size sensing not available. 
. Start Scan control at the Scanner not available. 
. Stop control at the Scanner not available. 

B. Printer Display 

1) Printer State Information (Ready, Not Ready, Printing Job XX) 

2) Function Faults which stop the Printer and/or make the Printer Not Available to Print any Job. 

3) Faulted Jobs in the Print Queue Warning messages. 

4) Printer Status and Warning Messages 
Examples: 

. X sets complete, Y sets selected. 

. Next Job requires a new stock and a tray is available. 

. Tray goes empty and auto tray switching has occurred. 

5) Function Faults which make the Printer Not Available to accept some Print jobs or make the Print 
function degraded (Degraded Printer Capability) 

Examples: 

. Finisher not available: 

. Stitching function not available. 

. Binding function not available. 

. Signature printing not available. 

. Tray 1 not available. 

. Tray 2 not available. 

.Tray 3 not available. 

C. System Control Display 

1 ) System Status Messages 
Examples: 

. Low Disk space warnings. 
. Disk needs to be scavenged. 

2) Faulted Job in System file warning messages. 

3) Function faults which impact things other than Print and/or Scan. 

. Image Display functions not available. 
. External Data Interface not available. 
Examples: 

- Copy to From Streaming Tape not available. 

- External Data Interface not available. 

- XNS Data Interface not available. 
. Ul Function Degraded 

Examples: 

- Mouse Unavailable. 

- Touch Unavailable. 

- Keyboard Unavailable. 

System faults which prevent all system functions from operating will either be displayed through a separate 
display mechanism which takes display priority over all of the above status display mechanism which takes 
display priority over ail of the above status displays or wfll be displayed in all Status Handler message display 
areas simultaneously. 

The status handler display area is able to simultaneously display messages for each of the major display 
areas identified in sections III A-C and also is capable of simultaneously displaying multiple top level messages 
within each of these areas. 

If a lower level function fault occurs which impacts independent system level functions as perceived by the 
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operator (e.g. Post Parse function fault can impact the Printing function and the Image Display function and 
these are both independent functions from the operator's point of view) then the fault is displayed in all applic- 
able Status Handier display areas per the requirements stated in sections III A-C. 

5 D. Status Handler Display Priorities 

In the event that there are more messages than there is room for display in a given Status Handier Display 
area, the display priority will be in the order listed in sections III A-C. If there are multiple messages of any given 
type (i.e. multiple faults, status messages, or Degraded mode messages) the display priority for these will be 
10 on a first in, first out basis. 

IV. Degraded Mode Display 

Degraded Mode is simply an outcome of handling the faults as indicated per the event buckets defined 
15 previously. The system automatically enters degraded mode whenever a Function or a Function Feature 
becomes unavailable due to a fault The following operator perceivable functions have been identified: 

- Scanner 

- Printer 

- Image Display (i.e. Edit Mode) 
20 - Externa! Data Interface functions 

- User Interface 

The only Function Features that have been identified are related to the Scan, Print, the External data inter- 
face, and the Ul Functions. A list of the features within each of thee functions that can become unavailable is 
provided in sections III A (item #4), III B (item #5), and III C (item #3). Some unique display features related to 
25 handling these is as follows: 

- All faults which cause a function or a function feature to become unavailable are displayed in the approp- 
riate status handler display area whether the faulted function or function feature is currently in use or not. 
The only exception is if the operator disables a function or a function feature via the Switches dialog. For 
this case, any fault related to that function or function feature is no longer be displayed in the Status Handler 

30 area. 

- The operator is provided with one centralized location in the interface where they can get a complete 
status of all system functions and function features which are currently faulted or disabled. 

V. Degraded Model Event Handling 

35 

If an attempt is made to submit an object to a function which contains a faulted feature or a deconfigured 
feature and the function needs this feature to operate on the object, the object is faulted and prevented from 
entering the function. 

If a function feature needed to continue an operation on an object which is currently in the function either 
40 becomes faulted or is deconfigured while the object is still in the function, the function becomes unavailable 
until the object is removed from the function. If the function is of the type that holds onto objects during fault 
conditions (e.g. Print and Scan), the operator is provided with appropriate information concerning how to make 
the function available again (i.e. fix the feature or; Save or Delete the object). 

Several Scanner sensor faults can affect the system's ability to make the correct Document input mode 
45 selection. If a fault which affects the mode selection process is detected during power up self-test and there is 
no job cun-ently in process in the Scanner, the system responds as follows: 

- If the RDH sensor has failed, the system automatically disables the RDH mode. 

- If the SADH sensor has failed, the system automatically disables the SADH mode. 

- If the Bar code reader has failed, the system automatically disables the barcode reading mechanism. 
so For the above cases, the operator is informed of the problem and the fact that a given input mode is no 

longer available via the sensor fault declared. 

If a sensor fault occurs during normal operation, the operator is normally made aware of the problem when 
one of the following faults is detected: 

- SADH mode misfeed. - - • 
55 - RDH mode misfeed. 

- " No Document to Scan" mode selection conflict message. 

- " Remove Document on Platen" mode selection conflict message. 
The Call Avoidance information for these faults informs the operator that 
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- repeated fault occurrences can be the result of a hardware failure; 

- rf the fault persistently occurs, service should be called; and 

- The scanner can be made available to handle certain jobs by deconfiguring the appropriate input mode 
via the switches interface. 



A. Document Input Mode Selection Modification Requirements when an input mode is Decorrfigured 

The act of deconfiguring a mode (either automatically or as a result of an operator invocation in the switches 
dialog) results in the following modifications to the input mode selection process: 
10 1 ) If the RDH mode has been disabled, the mode selection logic always assumes that there is no paper in 
the RDH tray. 

2) If the SADH mode is disabled, the mode selection logic assumes that there is no paper in the SADH 
slot unless CFF mode has been selected at the U 1 52. If CFF mode has been selected, the mode selection 
logic assumes that there is paper in the SADH slot 
15 3) If the CFF mode has been disabled, the interface does not allow the CFF mode to be selected. 

4) If the bar code reader has been disabled, the mode selection logic makes the following assumptions: 
Case 1 - After power on 

If no documents are sensed in the RDH tray and the SADH slot, the mode selection logic assumes that 
there is a document on the platen. 
20 If documents are sensed in either the RDH tray or the SADH slot, the mode selection logic assumes that 

there is no document on the platen. 

Case #2 UDH has been opened and closed since the last scanning task and the UPS cover is currently 
closed 

Same as case #1 above. 
25 Case 3 - All other cases 

Mode selection assumptions remain as specified in scanner mode selection charts of Figures 12A- 12D. 
The display of fault clearance and recovery instructions according to an embodiment of the present inven- 
tion provides the operator with the ability to: (1 ) monitor the current fault status of the system; (2) access fault 
clearance and recovery instructions; and (3) avoid unnecessary service calls. Because system 2 has the ability 
30 to execute both synchronous and asynchronous operations concurrently and independently, and because this 
system allows the operator to create, store and work on objects in the system, the fault handling and display 
strategies according to the present invention greatly expand the capabilities of the system. The expanded 
capabilities include: 1 ) the ability to fault specific functions and/or function features without impacting other inde- 
pendent functions and/or function features; 2) the ability to fault individual operator selectable objects which 
35 exist within the system independently from faulting the hardware functions of the system; 3) the ability to inform 
the operator that specific synchronous operation requests have failed via a display mechanism in the user inter- 
face 52; 4) the ability to provide advanced warnings that specific asynchronous operations will fault if specific 
actions are not taken to prevent them; 5) the ability to display messages/faults for independent system functions 
in separate display areas so that the operator can focus only on the specific area of the system that needs atten- 
40 tion; 6) the ability to provide separate and unique clearance and recovery options for system functions as 
opposed to the objects being operated on by the function; 7) the ability to allow the operator to fix faulted objects 
through the job review/edit features available within the system; and 8) the ability to allow a function with a faul- 
ted feature to continue to operate on selected objects if the object does not require the specific feature of the 
function that is faulted to be processed. 
45 While this invention has been described in conjunction with the specific embodiments thereof, it is evident 
that many alternatives, modifications and variations will be apparent to those skilled in the art For example, 
the display at user interface 52 can be updated to provide clearance and/or recovery instructions as different 
faults incur in the system. An illustration of when this is necessary is when certain scanner faults require that 
documents in the RDH be reordered. A document misfeed occurring during this reorder can require a new type 
so of fault recovery. Accordingly, the preferred embodiments of the invention as set forth herein are intended to 
be illustrative, not limiting. Various changes may be made without departing the scope of the invention as 
defined in the following claims. 



1. A method for clearance and recovery of faults in an electronic reprographic system (2), including moni- 
toring the system (2) for fault occurrence, characterised by storing in memory means (61) clearance and 
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recovery instructions for specific system faults, faults having similar clearance and recovery instructions 
being grouped into buckets, upon detection of a fault occurrence, accessing the stored clearance and 
recovery instructions; and displaying the appropriate clearance and recovery instructions corresponding 
to the detected fault, thereby enabling an operator to initiate clearance and recovery from the fault. 

5 

2. A method as claimed in claim 1 , characterised in that said displaying clearance and recovery instructions 
includes displaying instructions for independent system functions in separate display areas. 

3. A method as claimed in claim 1 or claim 2, characterised by monitoring the system (2) for predictable fault 
10 occurrences, and displaying warnings upon a determination that specific system operations will result in 

a fault occurrence. 

4. A method as claimed in any one of claims 1 to 3, characterised by monitoring the input into the system 
(2) and performance by the system (2) of specific operation requests, and displaying failure messages 

15 when an operation cannot be completed for any reason. 

5. A method as claimed in any one of claims 1 to 4 characterised by determining the system functions affected 
by a detected fault, and continuing operation of any functions not affected by the detected fault. 

20 6. A method as claimed in any one of claims 1 to 5, chacterised in that said displaying step includes displaying 
a step-by-step series of clearance instructions and/or displaying the particular areas of a scanner which 
require clearance in response to detection of a scanner fault and/or updating any displayed recovery 
instructions as different system faults are detected. 

25 7. An apparatus for clearance and recovery of faults in an electronic reprographic system (2), monitoring 
means for monitoring the system (2) forfault occurrence, characterised by storage means (61) for storing 
in memory clearance and recovery instructions for specific system faults, faults having similar clearance 
and recovery instructions being grouped into buckets, accessing means for accessing the stored clearance 
and recovery instructions upon detection of a fault occurrence, and display means for displaying the 

30 appropriate clearance and recovery instructions corresponding to the detected fault, thereby enabling an 

operator to initiate clearance and recovery from the fault. 

8. An apparatus as claimed in claim 7, characterised in that said display means displays clearance and recov- 
ery instructions for independent system functions in separate display areas. 

35 

9. An apparatus as claimed in claim 7 or claim 8, characterised in that said monitoring means monitors the 
system (2) for predictable fault occurrences, and said display means displays warnings upon a determi- 
nation that specific system operations will result in a fault occurrence. 

40 1 0. An apparatus as claimed in any one of claims 7 to 9, characterised in that said monitoring means monitors 
the input into the system (2) and performance by the system (2) of specific operation requests, and said 
display means displays failure messages when an operation cannot be completed for any reason. 

11. An apparatus as claimed in any one of claims 7 to 1 0, characterised by determining means for determining 
45 the system functions affected by a detected fault, and means enabling continuing operation of any func- 
tions not affected by the detected fault 

12. An apparatus as claimed in any one of claims 7 to 1 0, characterised in that said display means displays 
a step-by-step series of clearance instructions and/or displays the particular areas of a scanner which 

50 require clearance in response to detection of a scanner fault and/or updates any displayed recovery 

instructions as different system faults are detected. 
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Level of Information required by Operator relative to Object Faults 


Object Fault Type 


Level of Information Required 


Object faulted in the Print 
Queue because a Print 

runuiiuii rcaiuic iicquiieu 

by the Object is not 
available. 


Need to be able to identify the specific 
function feature which caused the 

fihiprt to fault* 

- Finisher totally not available. 

- Stitcher not available. 

- Binder not available. 

• Signature Printing not available. 

• Loopback feature not available 
(unable to print complex images in 
job). 

- Cannot access net to get file 
required by job. 


Something about the 
object prevents a function 
from continuing an 
operation on the object. 


- If the entire Object is bad, the only 
requirement is to inform the 
operator that the object must be 
deleted. 

- If a given page of an object is bad, 
the information available must 
identify the location of the page(s) 
in the job that are bad (i.e. pg. #2 is 

Dau). IMOie. I ncic i> nv icvjmu ciiici il 

to update the faulted page identifier 
if the operator rearranges the order 
of the pages while in Job 
Review/Edit. 

- If an operator selectable image 
wihtin a page is bad. the operator 
must be provided with a means to 
determine the name of image that is 
bad. 


Object faulted because it 
was removed from a 
function in a partially 
processed state. 


Need to be able to identify the specific 
operation that is partially completed : 
• Batch rotate partially complete. 
- S pecific Edit mode operations that 
are partially complete. 


Object faults because of 
invalid programming 
parameters which were 
detected after the object 
entered the system. 


Need to be able to identify the exact 
conflict condition that has occurred. 



27 



EP 0 478 343 A2 



£. £ 

r+ ID 

cm id 
S 3 

ID c 

_ 

£ c 

£ 5- 

S S 

3 % 

s 2 

a vn 

"2 
5 SL 

5 3D 
J ID 

o o 
-* < 
cr *d 

c 

•I 

3 



CD 
< 
ft 



id 
a. 

<D 

n 



ID 

r\ 
O 
3 
D. 



Q 

ii 

o 

o 

3 



at 



Z 

o 



z 
o 



z 
o 



z 
o 



z 
o 



z 
o 



z 
o 



z 
o 



-< 

m 



-< 
m 



Z 

o 



O 
ID 



0 

a* 



z 
O 



0 



< 
m 



3D 
O 



Q 



cr o v> 

ill? 

^ CO 2 A 

vn T □ rt 



5 

ID 



J? o 3 ^ ft 
3?^ 



3T O 
Q X 
ID 



OJ 

3 
>a 

2 3D 

m ft 

is 



< 

#»♦ 

ID 
3 

-n 
C 

r+ 
CD 
C 

?r 

SL 
m 

A 

5* 

3 

n 

3" 



o 



w% 0 ^ 

£ 3 C a 3 

7 *4 O u ^ 
3 ^ 3" 0 Ct 



O A 



» 5 



A 3 

£. 3 
0 C 
s n> 



3 

a 

A 

■*» o 
& < 

— ID 

8.3 



si 

> 

£ 2 



2L 30 
<D 5 

S £. 



o 

re 



o 

3 

& _ 



§ o 

Q. * 



ID 
0) 



ID 

3 



3 
n 
ID 



> 

sr 

3 
<D 



<D £. 
ft ~ 

2 * 



0) 

o) rS 
cr b> 

75: 

ID 



2£ 
« 



2. ? m 



3 



28 



EP 0 478 343 A2 



II 

o 
o 

3 



< 
m 



to 

S 
a 
m 
a 



C 

< 

ST 
ft 



a 

to 

Ct 
ID 
Q. 



3 
01 
< 

si. 

ST 

ft 



ft 
ID 

ft 

Q. 



C 

= Si 

J Si. 

=; S o» 
£ a lo 

ft ^ ~ 



z 
o 



< 

m 



< 
m 



-< 

m 



0 



G 



O 
ID 



O 

© 



O 

*! 



3S 
o 



T3 > 

o 2 

M J? 



o X 2 » 



0> 01 
9 C 

sg 



< c 



» ? -n 



> 

l§ 

0> Q 

= 5' 
* 3 



30 

O _ rt> 

3 5 S » 

™ O S . •* 0) 

"2 "* S 3 S 



C 
3 



O 
3 

Tl 

0> 

c 



CD 

c 

n 
7T 
ft 

(A 
3 

n 

3* 
0) 

3 



-i w m z+ 
ft 



2 ct c 



ft 



01 
3 

a 

3D 

ft 

ft 5 

ft 
3 



o> 
3 

> 

C 

o 
3 

0) 

5* O 



G. 30 
ft ft 
01 A 



o 

a 

s 

O 



o> s ^ 



2. o $ s 



ft 

s 

3 



M 

ft "O 

I s " 

5 E. 



sr 

3 



ft 



ft £ < 

a 5- ft 
— IT 3 

3 



2 



29 



EP 0 478 343 A2 



/ 



O 

!< 



) - 








•* 


n 
*> 

m 


FIRST 
TASK 
AFTER IIT 
POWER 
UP 


FIRST 
TASK 
AFTER IIT 
POWER 
UP 


FIRST 
TASK 
AFTER IIT 
POWER 
UP 


FIRST 
TASK 
AFTER IIT 
POWER 
UP 


FIRST 
TASK 
AFTER IIT 
POWER 
UP 


LAST IIT 
TASK? 


YES 


YES 


YES 


YES 


YES 


UDH 
REMAINED 

CLOSED 
SINCE LAST 

SCAN? 


CLOSED 


CLOSED 


CLOSED 


CLOSED 


CLOSED 


CURRENT 
UDH 
COVER 
STATE ? 


YES 


NO 


NO 


ON 


ON 


DOCU- 
MENT 
SENSED 
IN THE 
SLOT? 


ON 


YES 


YES 


ON 


NO 


UNSCANNED 
DOCUMENTS 
SENSED IN 
THE RDH 
TRAY? 


1 z 


Z 
> 


Z 
> 


N.A. 


Z 
> 


SCANNED 
DOCUMENTS 
SENSED IN 
THE RDH 
TRAY? 


YES- 
DURING 
POWER 
UP SEQ. 


YES- 
DURING 
POWER 
UPSEQ. 


YES- 
DURING 
POWER 
UPSEQ. 


YES- 
DURING 
POWER 
UP SEQ. 


YES- 
DURING 
POWER 
UPSEQ. 


CHECK 
FOR 

DOCU- 
MENT ON 
PLATEN? 


ON 


YES 


NO 


YES 


NO 

■ 


DOCU- 
MENT 
SENSED 

ON 
PLATEN ? 


SELECT SADH 
MODE. 


DECLARE FAULT 

-REMOVE 
DOCUMENT LEFT 
ON THE GLASS*. 


SELECT RDH MODE. 


SELECT PLATEN 
MODE. 


DECLARE FAULT 
"NO DOCUMENT 
TO SCAN" AT 
START. 


SYSTEM ACTION 



22 
CI 



30 



EP 0 478 343 A2 



32 



so 



CD 






FIRST 
TASK 
AFTER IIT 
POWER 

UP 
ur 


FIRST 
TASK 
AFTER IIT 
POWER 
UP 


FIRST 
TASK 
AFTER IIT 
POWER 

1 ID 
Ur 


< 


< 
m 


\ 


m 

IA 


v> 




n 


n 

mm 


/ 

mm> 1 


LOSI 


.OSI 


ISO 


■ ■ i 
o 


o 


q y 


< 


< 

m 


m 


m 
i/i 


(A 


ITS 


YES 


YES 


NO 


N.A. 


N.A. 


N.A. 


YES- 
DURING 
POWER 
UPSEQ. 


YES- 
DURING 
POWER 
UPSEQ. 


YES- 
DURING 
POWER 
UPSEQ. 


YES 


ON 


YES 


DECLARE FAULT 

"REMOVE 
DOCUMENT LEFT 
ON THE GLASS" 


SELECT SADH 
MODE. 


DECLARE FAULT 

"REMOVE 
DOCUMENT LEFT 
ON THE GLASS". 



A 



31 



EP 0 478 343 A2 



O 



< 



) « 


Ul 


Kl 




o 


ID 


n 

m 


PLATEN 


PLATEN 


PLATEN 


PLATEN 


PLATEN 


PLATEN 


LAST IIT 
TASK? 


YES 


YES 


YES 


YES 


YES 


YES 


UDH 
REMAINED 

CLOSED 
SINCE LAST 

SCAN? 


CLOSED 


CLOSED 


CLOSED 


CLOSED 


CLOSED 


CLOSED 


CURRENT 
UDH 
COVER 
STATE ? 


YES 


YES 


YES 


ON 


ON 


ON 


DOCU- 
MENT 
SENSED 
IN THE 
SLOT? 


YES 


ON 


NO 


NO 


NO 


NO 


UNSCANNED 
DOCUMENTS 
SENSED IN 
THE RDH 
TRAY? 


NO 


YES 


ON 


YES 


NO 


NO 


SCANNED 
DOCUMENTS 
SENSED IN 
THE RDH 
TRAY? 


ON 


NO 


NO 


NO 


ON 


NO 


CHECK 
FOR 

DOCU- 
MENT ON 
PLATEN ? 


V Z 
J > 


Z 
> 


N.A. 


z 
> 


Z 

> 


Z 
> 


DOCU- 
MENT 
SENSED 

ON 
PLATEN ? 


DECLARE FAULT 

"REMOVE 
DOCUMENT LEFT 
ON THE GLASS". 


DECLARE FAULT 

"REMOVE 
DOCUMENT LEFT 
ON THE GLASS". 


DECLARE FAULT 

"REMOVE 
DOCUMENT LEFT 
ON THE GLASS". 


DECLARE FAULT 

"REMOVE 
DOCUMENT LEFT 
ON THE GLASS". 


SELECT PLATEN 
MODE. \- 


m 

g? 

H 
m 

Z 


SYSTEM ACTION 



33 



32 




33 




34 




EP0478 343 A2 



3 



Ul 


Ul 
Kl 


— • 


Ul 

o 


KI 
IO 


DONT 
CARE 


DONT 
CARE 


DONT 
CARE 


DONT 
CARE 


DONT 
CARE 


ON 


NO 


NO 


ON 


1 

ON 


CLOSI 


CLOSI 


CLOSE 


CLOSE 


CLOSI 


m 

o 


o 


O 


O 




YES 


NO 


NO 


ON 


NO 


ON 


YES 


YES 


ON 


NO 


ON 


ON 


NO 


YES 


YES 


YES- 
BEFORE 
SCAN 


YES- 
BEFORE 
SCAN 


YES- 
BEFORE 
SCAN 


YES- 
BEFORE 
SCAN 


Z3D •] 


NO 


YES 


NO 


YES 


O 










i* ■ 


SELECT SADH 
MODE. 


SELECT PLATEN 
MODE. 


ELECT RDH MODE. 


SELECT PLATEN 
MODE. 


m 
r- 
m 

q 

3D 
D 
Z 

o 

V 
m 



o 

>i 



35 




36 



J 



Europaisches Patantamt 
European Patent Office 
Office europeen des brevets 




@ Publication number: 0 478 343 A3 



EUROPEAN PATENT APPLICATION 



© Application number : 91308822.5 
© Date of filing : 27.09.91 



©Int CI. 5 : H04N 1/00 



© Priority : 28.09.90 US 589630 

© Date of publication of application : 
01.04-92 Bulletin 92/14 

© Designated Contracting States : 
DE FR GB 

© Date of deferred publication of search report : 
05.08.92 Bulletin 92/32 

© Applicant : XEROX CORPORATION 
Xerox Square - 020 
Rochester New York 14644 (US) 



(72) Inventor : Gauronski, John F. 
459 Embury Road 
Rochester, New York 14625 (US) 
Inventor : Knodt, Kurt T. 
60 HollyvaJe Drive 
Rochester, New York 14618 (US) 

© Representative : Johnson, Reginald George et 
al 

Rank Xerox Patent Department, Albion House, 
55 New Oxford Street 
London WC1A 1BS (GB) 



(m) Fault clearance and recovery in an electronic reprographic system. 



(57) A fault clearance and recovery operation in an 
electronic reprographic system comprises stor- 
ing in memory clearance and recovery instruc- 
tions for specific system faults, monitoring the 
system for fault occurrence and accessing and 
displaying the stored instructions upon detec- 
tion of a fault occurrence. Faults having similar 
recovery features are classified into buckets to 
facilitate the clearance and recovery oper- 
ations. 



CO 

< 

CO 
CO 
00 



STORE CLEARANCE/ 
RECOVERY INSTRUCTIONS 
FOR SPECIFIC FAULTS 



CONTINUE ER 
SYSTEM OPERATION 



MONITOR ER SYSTEM 
FOR FAULT OCCURRENCE 



NO 



YES 



206 



ACCESS STORED 
CLEARANCE/RECOVERY 
INSTRUCTIONS/CONTINUE 
SYSTEM OPERATION 
UNAFFECTED BY FAULT 



DISPLAY APPROPRIATE 
CLEARANCE/RECOVERY 
INSTRUCTIONS 



Cl 



OPERATOR 
INTERVENTION 



RECOVERY FROM 
FAULT? 



YES 



NO 



SERVICE CALL 



FIG. 8 



LU 



Jouve, 18, rue Saint-Denis, 75001 PARIS 



EP 0 478 343 A3 



European Patent 
Office 



EUROPEAN SEARCH REPORT 



Affile 



EP 91 30 8822.5 



DOCUMENTS CONSIDERED TO BE RELEVANT 



Category 



Citation ofi 



CLASSIFICATION OF THE 
APPLICATION (tot CIS) 



US-A-4 876 606 (BAM© ET AL. ) 

* the whole document * 

DE-A-3 327 906 (CANON) 

* the whole document * 

DE-A-3 922 115 (RICOH) 

column 7, line 12 - column 8, line 41 



EP-A-0 376 473 ( K0N7CA) 

* column 2, line 32 - column 5, line 4 * 

GB-A-2 166 619 (CANON) 

* abstract * 



Hie 



report has been drawn op for all 



1,7 

2.3,8,9 
1.7 

2-6,8-12 
1.7 

2,4-6,8, 
10-12 

1-12 



1-12 



H04N1/00 



SEARCHED flat. CLS > 



H04N 



S 

£ 



Rats of tench 
THE HAGUE 



12 JUNE 1992 



GREVE M.P. 



CATEGORY OF CITED DOCUMENTS 



X : particularly relevant if taken alone 
Y : partkntaity ntmnt If combined wtt 

aoaaaent of the sane category 
A : technological Background 

O: 
P:i 



T: 
E: 



theory or principle underlying the invention 



the filing eate 
dteatn the 
it dtal for oth 



aherof tbes 



2 



This Page is Inserted by IFW Indexing and Scanning 
Operations and is not part of the Official Record 

BEST AVAILABLE IMAGES 

Defective images within this document are accurate representations of the original 
documents submitted by the applicant. 

Defects in the images include but are not limited to the items checked: 

□ BLACK BORDERS 

□ IMAGE CUT OFF AT TOP, BOTTOM OR SIDES 

□ FADED TEXT OR DRAWING 

□ BLURRED OR ILLEGIBLE TEXT OR DRAWING 

□ SKEWED/SLANTED IMAGES 

□ COLOR OR BLACK AND WHITE PHOTOGRAPHS 

□ GRAY SCALE DOCUMENTS 

□ LINES OR MARKS ON ORIGINAL DOCUMENT 

□ REFERENCE(S) OR EXHffilT(S) SUBMITTED ARE POOR QUALITY 

□ OTHER: 

IMAGES ARE BEST AVAILABLE COPY. 
As rescanning these documents will not correct the image 
problems checked, please do not report these problems to 
the IFW Image Problem Mailbox. 



TWs Page Blank (uspto) 



